@poe-platform/safe-bash 0.1.756 → 0.1.758

package/dist/safe-bash/chunks/chunk-NB2V7EOY.js

@@ -1,1348 +0,0 @@
-import {
-  escaping_exports
-} from "./chunk-NJVGOIYN.js";
-import {
-  contracts_exports
-} from "./chunk-MZQW2DOL.js";
-import {
-  yield_exports
-} from "./chunk-XPF5XHLY.js";
-import {
-  dirname,
-  posixPath,
-  resolvePath
-} from "./chunk-OUUVROTM.js";
-import {
-  UsageError,
-  path_exports
-} from "./chunk-ISCZG7WA.js";
-import {
-  __reExport,
-  import_buffer,
-  init_platform,
-  setImmediate
-} from "./chunk-ZG7GWQ5P.js";
-
-// packages/safe-bash/src/commands/node/browser.ts
-init_platform();
-
-// packages/safe-bash/src/commands/node/safejs.ts
-init_platform();
-
-// packages/safe-bash/src/integrations/safejs/values.ts
-init_platform();
-function record(value, name) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new TypeError(`${name} must be a plain object`);
-  }
-  const prototype = Object.getPrototypeOf(value);
-  if (prototype !== Object.prototype && prototype !== null) {
-    throw new TypeError(`${name} must be a plain object`);
-  }
-  const result = {};
-  for (const key of Reflect.ownKeys(value)) {
-    const descriptor = Object.getOwnPropertyDescriptor(value, key);
-    if (typeof key !== "string" || descriptor === void 0 || !("value" in descriptor)) {
-      throw new TypeError(`${name} must contain only string-keyed data properties`);
-    }
-    Object.defineProperty(result, key, {
-      value: descriptor.value,
-      enumerable: true,
-      configurable: true,
-      writable: true
-    });
-  }
-  return result;
-}
-function onlyKeys(value, allowed) {
-  for (const key of Object.keys(value)) {
-    if (!allowed.includes(key)) throw new TypeError(`Unsupported option: ${key}`);
-  }
-}
-function stringValue(value, name) {
-  if (typeof value !== "string") throw new TypeError(`${name} must be a string`);
-  return value;
-}
-function abortError() {
-  return Object.assign(new Error("The operation was aborted"), {
-    name: "AbortError",
-    code: "ABORT_ERR"
-  });
-}
-function checkSignal(signal) {
-  if (signal?.aborted) throw abortError();
-}
-async function withSignal(signal, operation) {
-  checkSignal(signal);
-  if (signal === void 0) return operation();
-  let onAbort = () => void 0;
-  const cancelled = new Promise((_resolve, reject) => {
-    onAbort = () => reject(abortError());
-    signal.addEventListener("abort", onAbort, { once: true });
-  });
-  try {
-    return await Promise.race([Promise.resolve().then(() => {
-      checkSignal(signal);
-      return operation();
-    }), cancelled]);
-  } finally {
-    signal.removeEventListener("abort", onAbort);
-  }
-}
-
-// packages/safe-bash/src/commands/node/buffer.ts
-init_platform();
-
-// packages/safe-bash/src/commands/safejs/options.ts
-init_platform();
-var defaultSafeJsLimits = Object.freeze({});
-var unlimitedLimits = Object.freeze({
-  maxSourceBytes: Infinity,
-  maxInputBytes: Infinity,
-  maxOutputBytes: Infinity,
-  timeoutMs: Infinity,
-  maxSteps: Infinity,
-  maxCallDepth: Infinity,
-  stringLength: Infinity,
-  arrayLength: Infinity,
-  dataSize: Infinity
-});
-function commandLimits(options = {}) {
-  for (const [name, value] of Object.entries(options)) {
-    if (!Object.hasOwn(unlimitedLimits, name)) throw new TypeError(`Unknown SafeJS limit: ${name}`);
-    if (value !== Infinity && (!Number.isSafeInteger(value) || value < (name === "timeoutMs" ? 1 : 0))) throw new RangeError(`Invalid SafeJS limit: ${name}`);
-  }
-  return Object.freeze({ ...unlimitedLimits, ...options });
-}
-
-// packages/safe-bash/src/commands/node/buffer.ts
-var bufferSource = `
-class Buffer extends Uint8Array {
-  static from(value, encodingOrOffset, length) {
-    if (typeof value === "string") return new Buffer(__safeBashBuffer.encode(value, encodingOrOffset));
-    if (value instanceof ArrayBuffer) return new Buffer(value, encodingOrOffset, length);
-    if (Array.isArray(value) || value instanceof Uint8Array) return new Buffer(value);
-    if (value && value.type === "Buffer" && Array.isArray(value.data)) return new Buffer(value.data);
-    throw new TypeError("Buffer.from requires a string, byte array or ArrayBuffer");
-  }
-  static alloc(size, fill = 0, encoding) {
-    if (typeof size !== "number") throw new TypeError("Buffer size must be a number");
-    if (!Number.isFinite(size) || size < 0) throw new RangeError("Invalid Buffer size");
-    const result = new Buffer(size);
-    if (fill === "") return result;
-    if (typeof fill === "string" || fill instanceof Uint8Array) {
-      const pattern = Buffer.from(fill, encoding);
-      if (pattern.length === 0 && size > 0) throw new TypeError("Invalid Buffer fill");
-      for (let i = 0; i < result.length; i++) result[i] = pattern[i % pattern.length];
-    } else result.fill(fill);
-    return result;
-  }
-  static isBuffer(value) { return value instanceof Buffer; }
-  static isEncoding = __safeBashBuffer.isEncoding;
-  static byteLength(value, encoding) {
-    if (typeof value === "string") return __safeBashBuffer.byteLength(value, encoding);
-    if (value instanceof ArrayBuffer || ArrayBuffer.isView(value)) return value.byteLength;
-    throw new TypeError("Buffer.byteLength requires a string, ArrayBuffer or view");
-  }
-  static concat(list, totalLength) {
-    if (!Array.isArray(list) || !list.every(value => value instanceof Uint8Array)) throw new TypeError("Buffer.concat requires byte arrays");
-    if (totalLength === undefined) totalLength = list.reduce((size, value) => size + value.length, 0);
-    if (typeof totalLength !== "number") throw new TypeError("Buffer length must be a number");
-    if (!Number.isInteger(totalLength) || totalLength < 0) throw new RangeError("Invalid Buffer length");
-    const result = Buffer.alloc(totalLength);
-    let offset = 0;
-    for (const value of list) {
-      const count = Math.min(value.length, result.length - offset);
-      if (count <= 0) break;
-      result.set(value.subarray(0, count), offset);
-      offset += count;
-    }
-    return result;
-  }
-  toString(encoding, start = 0, end = this.length) {
-    start = Math.min(this.length, Math.max(0, Math.trunc(start) || 0));
-    end = Math.min(this.length, Math.max(0, Math.trunc(end) || 0));
-    return __safeBashBuffer.decode(Array.from(super.subarray(start, Math.max(start, end))), encoding);
-  }
-  subarray(start, end) {
-    const view = super.subarray(start, end);
-    return new Buffer(view.buffer, view.byteOffset, view.byteLength);
-  }
-  equals(other) {
-    if (!(other instanceof Uint8Array)) throw new TypeError("Buffer.equals requires a byte array");
-    return this.length === other.length && this.every((value, index) => value === other[index]);
-  }
-  toJSON() { return { type: "Buffer", data: Array.from(this) }; }
-}
-Buffer.prototype.slice = Buffer.prototype.subarray;
-`;
-function bufferBindings(options) {
-  const limits = commandLimits(options.limits);
-  const declare = options.runtime.declareHostOperation;
-  const exceeded = (resource) => {
-    throw Object.assign(new RangeError(`Buffer ${resource} limit exceeded`), { code: "budgetExceeded" });
-  };
-  const encoding = (value) => {
-    if (value === void 0 || value === "") return "utf8";
-    if (typeof value !== "string" || !import_buffer.Buffer.isEncoding(value)) throw new TypeError("Unknown Buffer encoding");
-    return value;
-  };
-  return {
-    encode: declare((value, selected) => {
-      if (typeof value !== "string") throw new TypeError("Buffer input must be a string");
-      const codec = encoding(selected);
-      if (import_buffer.Buffer.byteLength(value, codec) > limits.arrayLength) exceeded("arrayLength");
-      return Array.from(import_buffer.Buffer.from(value, codec));
-    }, "read-side-effect"),
-    decode: declare((value, selected) => {
-      if (!Array.isArray(value)) throw new TypeError("Buffer bytes must be an array");
-      if (value.length > limits.arrayLength) exceeded("arrayLength");
-      if (!value.every((byte) => typeof byte === "number" && Number.isInteger(byte) && byte >= 0 && byte <= 255)) throw new TypeError("Invalid Buffer byte");
-      const result = import_buffer.Buffer.from(value).toString(encoding(selected));
-      if (result.length > limits.stringLength) exceeded("stringLength");
-      return result;
-    }, "read-side-effect"),
-    isEncoding: declare((value) => typeof value === "string" && import_buffer.Buffer.isEncoding(value), "read-side-effect"),
-    byteLength: declare((value, selected) => {
-      if (typeof value !== "string") throw new TypeError("Buffer input must be a string");
-      return import_buffer.Buffer.byteLength(value, typeof selected === "string" && import_buffer.Buffer.isEncoding(selected) ? selected : "utf8");
-    }, "read-side-effect")
-  };
-}
-
-// packages/safe-bash/src/commands/node/timers.ts
-init_platform();
-
-// packages/safe-bash/src/commands/safejs/types.ts
-init_platform();
-var SafeJsCommandLimitError = class extends Error {
-  constructor(resource) {
-    super(`SafeJS command limit exceeded: ${resource}`);
-    this.resource = resource;
-    this.name = "SafeJsCommandLimitError";
-  }
-  resource;
-  code = "SAFEJS_LIMIT";
-};
-
-// packages/safe-bash/src/commands/node/timers.ts
-var timerSource = `
-function setTimeout(callback, delay, ...args) {
-  if (typeof callback !== "function") throw new TypeError("setTimeout callback must be a function");
-  let milliseconds = Number(delay);
-  if (!Number.isFinite(milliseconds) || milliseconds < 1 || milliseconds > 2147483647) milliseconds = 1;
-  return __safeBashTimers.schedule(() => callback(...args), Math.trunc(milliseconds));
-}
-function clearTimeout(timer) { __safeBashTimers.clear(timer); }
-`;
-function timerBindings(options, signal, fail, pending) {
-  const declare = options.runtime.declareHostOperation;
-  const limits = commandLimits(options.limits);
-  const timers = /* @__PURE__ */ new Map();
-  let nextId = 0;
-  const clear = (id) => {
-    if (typeof id !== "number") return;
-    const timer = timers.get(id);
-    if (!timer) return;
-    clearTimeout(timer.handle);
-    timers.delete(id);
-    timer.complete();
-  };
-  signal.addEventListener("abort", () => {
-    for (const id of timers.keys()) clear(id);
-  }, { once: true });
-  return {
-    schedule: declare((callback, delay) => {
-      signal.throwIfAborted();
-      if (typeof callback !== "function" || typeof delay !== "number" || !Number.isInteger(delay) || delay < 1 || delay > 2147483647) throw new TypeError("Invalid timer");
-      if (pending.size >= limits.arrayLength) {
-        const error = new SafeJsCommandLimitError("arrayLength");
-        fail(error);
-        throw error;
-      }
-      const id = ++nextId;
-      let complete;
-      const completion = new Promise((resolve) => {
-        complete = () => {
-          pending.delete(completion);
-          resolve();
-        };
-      });
-      pending.add(completion);
-      const handle = setTimeout(() => {
-        timers.delete(id);
-        if (signal.aborted) {
-          complete();
-          return;
-        }
-        void Promise.resolve().then(() => callback()).catch(fail).finally(complete);
-      }, delay);
-      timers.set(id, { handle, complete });
-      return id;
-    }, "read-side-effect"),
-    clear: declare(clear, "read-side-effect"),
-    drain: declare(async () => {
-      while (pending.size > 0) {
-        signal.throwIfAborted();
-        await Promise.all(pending);
-      }
-      signal.throwIfAborted();
-    }, "read-side-effect")
-  };
-}
-
-// packages/safe-bash/src/commands/node/preload.ts
-init_platform();
-var nodeRequireSource = `
-const __safeBashModuleCache = new Map();
-const __safeBashMakeRequire = base => name => {
-  const path = __safeBashModulePath(base, name);
-  if (path === null) return __safeBashRequire(name);
-  if (__safeBashModuleCache.has(path)) return __safeBashModuleCache.get(path).exports;
-  let source;
-  try { source = __safeBashModuleRead(path); }
-  catch (error) {
-    if (error.code !== "ENOENT") throw error;
-    const missing = new Error("Cannot find module '" + name + "'");
-    missing.code = "MODULE_NOT_FOUND";
-    throw missing;
-  }
-  if (source.startsWith("\\uFEFF")) source = source.slice(1);
-  const module = { exports: {} };
-  if (path.endsWith(".json")) {
-    module.exports = JSON.parse(source);
-    __safeBashModuleCache.set(path, module);
-    return module.exports;
-  }
-  if (source.startsWith("#!")) {
-    const newline = source.indexOf("\\n");
-    source = newline < 0 ? "" : source.slice(newline);
-  }
-  __safeBashModuleCache.set(path, module);
-  try {
-    const directory = path.slice(0, path.lastIndexOf("/")) || "/";
-    (function(exports, require, module, __filename, __dirname) {
-      eval(source);
-    }).call(module.exports, module.exports, __safeBashMakeRequire(directory), module, path, directory);
-  } catch (error) {
-    __safeBashModuleCache.delete(path);
-    throw error;
-  }
-  return module.exports;
-};
-const require = __safeBashMakeRequire(__safeBashEntryDirectory);
-for (const name of __safeBashPreloads) __safeBashMakeRequire(__safeBashCwd)(name);
-`;
-
-// packages/safe-bash/src/commands/node/source-maps.ts
-init_platform();
-var alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-function decodeMap(value, base, limits) {
-  if (!value || typeof value !== "object") throw new Error("invalid source map");
-  const map = value;
-  if (map.version !== 3 || !Array.isArray(map.sources) || !map.sources.every((source2) => typeof source2 === "string") || typeof map.mappings !== "string" || map.sourceRoot !== void 0 && typeof map.sourceRoot !== "string") throw new Error("invalid source map");
-  const sources = map.sources;
-  const root = map.sourceRoot;
-  const lines = [];
-  const filenames = /* @__PURE__ */ new Map();
-  let entries = 0;
-  let dataBytes = 0;
-  const admit = (bytes = 128) => {
-    if (++entries > limits.arrayLength) throw new SafeJsCommandLimitError("arrayLength");
-    if (bytes > limits.dataSize - dataBytes) throw new SafeJsCommandLimitError("dataSize");
-    dataBytes += bytes;
-  };
-  let source = 0;
-  let originalLine = 0;
-  let originalColumn = 0;
-  let name = 0;
-  for (const encodedLine of pieces(map.mappings, ";")) {
-    admit();
-    const line = [];
-    let column = 0;
-    for (const encoded of pieces(encodedLine, ",")) {
-      if (!encoded) continue;
-      admit();
-      const fields = [];
-      let number = 0;
-      let shift = 0;
-      for (const character of encoded) {
-        const digit = alphabet.indexOf(character);
-        if (digit < 0 || shift > 50) throw new Error("invalid source map VLQ");
-        number += (digit & 31) * 2 ** shift;
-        if (digit & 32) shift += 5;
-        else {
-          fields.push(number % 2 ? -Math.floor(number / 2) : Math.floor(number / 2));
-          if (fields.length > 5) throw new Error("invalid source map segment");
-          number = 0;
-          shift = 0;
-        }
-      }
-      if (shift || ![1, 4, 5].includes(fields.length)) throw new Error("invalid source map segment");
-      column += fields[0];
-      if (!Number.isSafeInteger(column) || column < 0 || line.length && column < line[line.length - 1].column) throw new Error("invalid source map column");
-      if (fields.length === 1) {
-        line.push({ column });
-        continue;
-      }
-      source += fields[1];
-      originalLine += fields[2];
-      originalColumn += fields[3];
-      if (fields.length === 5) {
-        name += fields[4];
-        if (!Array.isArray(map.names) || name < 0 || name >= map.names.length) throw new Error("invalid source map name");
-      }
-      if (!Number.isSafeInteger(source) || source < 0 || source >= sources.length || !Number.isSafeInteger(originalLine) || originalLine < 0 || !Number.isSafeInteger(originalColumn) || originalColumn < 0) throw new Error("invalid source map position");
-      let filename = filenames.get(source);
-      if (filename === void 0) {
-        const path = sources[source];
-        const length = base.length + (root?.length ?? 0) + path.length + 1;
-        if (length > limits.stringLength) throw new SafeJsCommandLimitError("stringLength");
-        admit(128 + length * 2);
-        const rooted = (root ?? "") + path;
-        filename = rooted.includes(":") ? rooted : resolvePath(base, rooted);
-        filenames.set(source, filename);
-      }
-      line.push({ column, location: { filename, line: originalLine + 1, column: originalColumn + 1 } });
-    }
-    lines.push(line);
-  }
-  return lines;
-}
-function* pieces(text, delimiter) {
-  let start = 0;
-  for (; ; ) {
-    const end = text.indexOf(delimiter, start);
-    yield text.slice(start, end < 0 ? text.length : end);
-    if (end < 0) return;
-    start = end + 1;
-  }
-}
-function mapReference(source) {
-  let reference;
-  for (let index = 0; index < source.length; index++) {
-    const character = source[index];
-    if (character === '"' || character === "'" || character === "`") {
-      const quote = character;
-      while (++index < source.length) {
-        if (source[index] === "\\") index++;
-        else if (source[index] === quote) break;
-      }
-      continue;
-    }
-    if (character !== "/") continue;
-    if (!["/", "*"].includes(source[index + 1])) {
-      let previous = index - 1;
-      while (previous >= 0 && source[previous].trim() === "") previous--;
-      const before = source[previous];
-      let wordStart = previous;
-      while (wordStart >= 0 && "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ".includes(source[wordStart])) wordStart--;
-      const word = source.slice(wordStart + 1, previous + 1);
-      if (before !== void 0 && !"=(:,[!&|?;{}".includes(before) && !["return", "throw", "case", "yield", "await"].includes(word)) continue;
-      let bracket = false;
-      while (++index < source.length) {
-        if (source[index] === "\\") index++;
-        else if (source[index] === "[") bracket = true;
-        else if (source[index] === "]") bracket = false;
-        else if (source[index] === "/" && !bracket) break;
-      }
-      continue;
-    }
-    const block = source[index + 1] === "*";
-    const start = index + 2;
-    const end = source.indexOf(block ? "*/" : "\n", start);
-    const body = source.slice(start, end < 0 ? source.length : end).trim();
-    if (body.startsWith("#") || body.startsWith("@")) {
-      const directive = body.slice(1).trim();
-      if (directive.startsWith("sourceMappingURL=")) reference = directive.slice(17).trim();
-    }
-    index = end < 0 ? source.length : end + (block ? 1 : 0);
-  }
-  return reference;
-}
-async function nodeSourceLocation(source, filename, cwd, prefix, readSource, signal, limits) {
-  const offset = prefix.split("\n").length - 1;
-  const base = filename.startsWith("<") || filename === "-" ? cwd : dirname(filename);
-  let lines;
-  const reference = mapReference(source);
-  if (reference) {
-    try {
-      let json;
-      let mapBase = base;
-      if (reference.startsWith("data:")) {
-        const comma = reference.indexOf(",");
-        if (comma < 0) throw new Error("invalid source map data URI");
-        const header = reference.slice(0, comma);
-        const payload = reference.slice(comma + 1);
-        json = header.endsWith(";base64") ? import_buffer.Buffer.from(payload, "base64").toString("utf8") : decodeURIComponent(payload);
-      } else {
-        if (reference.includes(":") || reference.startsWith("//")) throw new Error("unsupported source map URL");
-        const path = resolvePath(base, decodeURIComponent(reference));
-        mapBase = dirname(path);
-        json = await readSource(path);
-      }
-      signal.throwIfAborted();
-      lines = decodeMap(JSON.parse(json), mapBase, limits);
-    } catch (error) {
-      signal.throwIfAborted();
-      if (error instanceof SafeJsCommandLimitError) throw error;
-    }
-  }
-  return (position) => {
-    const line = position.line - offset;
-    if (line < 1) return void 0;
-    const segments = lines?.[line - 1];
-    let low = 0;
-    let high = segments?.length ?? 0;
-    while (low < high) {
-      const middle = Math.floor((low + high) / 2);
-      if (segments[middle].column <= position.column - 1) low = middle + 1;
-      else high = middle;
-    }
-    return (low ? segments[low - 1].location : void 0) ?? { filename, line, column: position.column };
-  };
-}
-
-// packages/safe-bash/src/commands/node/filesystem.ts
-init_platform();
-function nodeReadFile(options, fs, signal, fail, pending) {
-  const read = fs.readFile;
-  const limits = commandLimits(options.limits);
-  return options.runtime.declareHostOperation((path, encoding, callback) => {
-    signal.throwIfAborted();
-    if (callback === void 0 && typeof encoding !== "function") return read(path, encoding);
-    if (typeof encoding === "function") {
-      callback = encoding;
-      encoding = void 0;
-    }
-    if (typeof callback !== "function") throw new TypeError("readFile callback must be a function");
-    if (pending.size >= limits.arrayLength) {
-      const error = new SafeJsCommandLimitError("arrayLength");
-      fail(error);
-      throw error;
-    }
-    const done = callback;
-    const completion = Promise.resolve().then(() => read(path, encoding)).then(
-      async (text) => {
-        await new Promise((resolve) => setImmediate(resolve));
-        signal.throwIfAborted();
-        return done(null, text);
-      },
-      async (error) => {
-        await new Promise((resolve) => setImmediate(resolve));
-        signal.throwIfAborted();
-        return done(error);
-      }
-    ).then(() => void 0).catch(fail).finally(() => pending.delete(completion));
-    pending.add(completion);
-    return void 0;
-  }, "read-side-effect", { callbackScheduling: "after-prefix" });
-}
-
-// packages/safe-bash/src/commands/node/path.ts
-init_platform();
-function createNodePathModule(runtime, cwd) {
-  const resolve = (...paths) => {
-    for (const path2 of paths) if (typeof path2 !== "string") throw new TypeError("path must be a string");
-    let joined = "";
-    for (let index = paths.length - 1; index >= -1; index--) {
-      const path2 = index < 0 ? cwd : paths[index];
-      if (!path2) continue;
-      joined = `${path2}/${joined}`;
-      if (path2.startsWith("/")) break;
-    }
-    const normalized = posixPath.join(joined);
-    return normalized.length > 1 && normalized.endsWith("/") ? normalized.slice(0, -1) : normalized;
-  };
-  const path = {
-    ...Object.fromEntries(Object.entries(posixPath).map(([name, operation]) => [name, runtime.declareHostOperation(operation, "read-side-effect")])),
-    normalize: runtime.declareHostOperation((value) => {
-      if (typeof value !== "string") throw new TypeError("path must be a string");
-      return posixPath.join(value);
-    }, "read-side-effect"),
-    resolve: runtime.declareHostOperation(resolve, "read-side-effect"),
-    relative: runtime.declareHostOperation((from, to) => {
-      const source = resolve(from).split("/").filter(Boolean);
-      const target = resolve(to).split("/").filter(Boolean);
-      let common = 0;
-      while (common < source.length && common < target.length && source[common] === target[common]) common++;
-      return [...Array(source.length - common).fill(".."), ...target.slice(common)].join("/");
-    }, "read-side-effect"),
-    sep: "/",
-    delimiter: ":"
-  };
-  return { ...path, posix: path };
-}
-
-// packages/safe-bash/src/commands/safejs/runtime.ts
-init_platform();
-
-// packages/safe-bash/src/diagnostics.ts
-var diagnostics_exports = {};
-init_platform();
-__reExport(diagnostics_exports, diagnostics_star);
-import * as diagnostics_star from "../../safe-bash-contracts/diagnostics.js";
-
-// packages/safe-bash/src/integrations/safejs/filesystem.ts
-init_platform();
-function makeSafeJsFsModule(makeFsModule, fs, options = {}) {
-  return makeFsModule({ adapter: fs, ...options });
-}
-
-// packages/safe-bash/src/commands/safejs/io.ts
-init_platform();
-
-// packages/safe-bash/src/commands/safejs/render.ts
-init_platform();
-var Text = class {
-  constructor(limit, fail) {
-    this.limit = limit;
-    this.fail = fail;
-  }
-  limit;
-  fail;
-  parts = [];
-  size = 0;
-  active = /* @__PURE__ */ new Set();
-  append(value) {
-    if (import_buffer.Buffer.byteLength(value) > this.limit - this.size) {
-      const error = new SafeJsCommandLimitError("maxOutputBytes");
-      this.fail(error);
-      throw error;
-    }
-    this.size += import_buffer.Buffer.byteLength(value);
-    this.parts.push(value);
-  }
-  quoted(value) {
-    if (import_buffer.Buffer.byteLength(value) + 2 > this.limit - this.size) {
-      const error = new SafeJsCommandLimitError("maxOutputBytes");
-      this.fail(error);
-      throw error;
-    }
-    this.append(JSON.stringify(value));
-  }
-  json(value, depth = 0) {
-    if (value === null || value === void 0) {
-      this.append("null");
-      return;
-    }
-    if (typeof value === "string") {
-      this.quoted(value);
-      return;
-    }
-    if (typeof value === "boolean" || typeof value === "number") {
-      this.append(JSON.stringify(value));
-      return;
-    }
-    if (typeof value !== "object" || this.active.has(value)) throw new TypeError("output requires acyclic JSON data");
-    this.active.add(value);
-    try {
-      if (Array.isArray(value)) {
-        this.append("[");
-        for (let index = 0; index < value.length; index++) {
-          if (index) this.append(",");
-          const property = Object.getOwnPropertyDescriptor(value, String(index));
-          if (property && !("value" in property)) throw new TypeError("output arrays must contain data properties");
-          this.json(property?.value, depth + 1);
-        }
-        this.append("]");
-      } else {
-        const entries = record(value, "output value");
-        this.append("{");
-        let first = true;
-        for (const [key, item] of Object.entries(entries)) {
-          if (item === void 0) continue;
-          if (!first) this.append(",");
-          first = false;
-          this.quoted(key);
-          this.append(":");
-          this.json(item, depth + 1);
-        }
-        this.append("}");
-      }
-    } finally {
-      this.active.delete(value);
-    }
-  }
-  finish() {
-    return this.parts.join("");
-  }
-};
-function renderOutput(values, limit, fail) {
-  const text = new Text(limit, fail);
-  for (let index = 0; index < values.length; index++) {
-    if (index) text.append(" ");
-    const value = values[index];
-    if (typeof value === "string") text.append(value);
-    else if (value === void 0) text.append("undefined");
-    else text.json(value);
-  }
-  text.append("\n");
-  return text.finish();
-}
-
-// packages/safe-bash/src/commands/safejs/io.ts
-var chunkSize = 64 * 1024;
-var GuestInput = class {
-  constructor(source, limit, signal, fail, resource = "maxInputBytes") {
-    this.limit = limit;
-    this.signal = signal;
-    this.fail = fail;
-    this.resource = resource;
-    this.iterator = (0, contracts_exports.readBytes)(source, signal);
-  }
-  limit;
-  signal;
-  fail;
-  resource;
-  iterator;
-  pending = new Uint8Array();
-  consumed = 0;
-  pulls = 0;
-  queue = Promise.resolve();
-  async take(size) {
-    this.signal.throwIfAborted();
-    while (!this.pending.length) {
-      if (++this.pulls % 64 === 0) await (0, yield_exports.yieldTurn)(this.signal);
-      const next = await this.iterator.next();
-      if (next.done) return void 0;
-      this.pending = next.value;
-    }
-    const length = Math.min(size, this.pending.length);
-    if (length > this.limit - this.consumed) {
-      const error = new SafeJsCommandLimitError(this.resource);
-      this.fail(error);
-      throw error;
-    }
-    const bytes = this.pending.slice(0, length);
-    this.pending = this.pending.subarray(length);
-    this.consumed += length;
-    return bytes;
-  }
-  serialize(operation) {
-    const result = this.queue.then(operation);
-    this.queue = result.then(() => {
-    }, () => {
-    });
-    return result;
-  }
-  readBytes(size = chunkSize) {
-    if (typeof size !== "number" || !Number.isSafeInteger(size) || size < 1 || size > chunkSize) throw new TypeError("readBytes size must be an integer from 1 through 65536");
-    return this.serialize(async () => {
-      const bytes = await this.take(size);
-      return bytes === void 0 ? null : Array.from(bytes);
-    });
-  }
-  readText() {
-    return this.serialize(async () => {
-      const pieces2 = [];
-      for (; ; ) {
-        const chunk = await this.take(chunkSize);
-        if (!chunk) break;
-        pieces2.push(chunk);
-      }
-      return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(import_buffer.Buffer.concat(pieces2));
-    });
-  }
-  async close() {
-    await this.iterator.return(void 0);
-  }
-};
-var GuestOutput = class {
-  constructor(stdout, stderr, limit, signal, fail) {
-    this.stdout = stdout;
-    this.stderr = stderr;
-    this.limit = limit;
-    this.signal = signal;
-    this.fail = fail;
-  }
-  stdout;
-  stderr;
-  limit;
-  signal;
-  fail;
-  queue = Promise.resolve();
-  produced = 0;
-  stderrFailed = false;
-  enqueue(bytes, target) {
-    this.signal.throwIfAborted();
-    if (bytes.length > this.limit - this.produced) {
-      const error = new SafeJsCommandLimitError("maxOutputBytes");
-      this.fail(error);
-      throw error;
-    }
-    this.produced += bytes.length;
-    const queued = this.queue.then(async () => {
-      for (let offset = 0; offset < bytes.length; offset += chunkSize) await (0, contracts_exports.writeBytes)(target, bytes.subarray(offset, offset + chunkSize), this.signal);
-    }).catch((error) => {
-      if (target === this.stderr) this.stderrFailed = true;
-      this.fail(error);
-      throw error;
-    });
-    this.queue = queued;
-    void queued.catch(() => {
-    });
-    return queued;
-  }
-  text(value, stderr = false) {
-    if (typeof value !== "string") throw new TypeError("stdio text output requires a string");
-    if (import_buffer.Buffer.byteLength(value) > this.limit - this.produced) {
-      const error = new SafeJsCommandLimitError("maxOutputBytes");
-      this.fail(error);
-      throw error;
-    }
-    return this.enqueue(import_buffer.Buffer.from(value), stderr ? this.stderr : this.stdout);
-  }
-  bytes(value, stderr = false) {
-    if (!Array.isArray(value) || value.length > chunkSize) throw new TypeError("stdio byte output requires an array of at most 65536 bytes");
-    for (const byte of value) if (!Number.isInteger(byte) || byte < 0 || byte > 255) throw new TypeError("stdio byte values must be integers from 0 through 255");
-    return this.enqueue(Uint8Array.from(value), stderr ? this.stderr : this.stdout);
-  }
-  console(args, stderr) {
-    void this.text(renderOutput(args, this.limit - this.produced, this.fail), stderr);
-  }
-  result(value) {
-    return this.text(renderOutput([value], this.limit - this.produced, this.fail));
-  }
-  async drain() {
-    await this.queue;
-  }
-};
-
-// packages/safe-bash/src/commands/safejs/runtime.ts
-var GuestDiagnostic = class extends diagnostics_exports.PublicDiagnostic {
-  constructor(info) {
-    super(info.message);
-    this.info = info;
-  }
-  info;
-};
-function errorInfo(error) {
-  if (typeof error === "string") return { name: "Error", code: "", message: error };
-  if (typeof error !== "object" || error === null) return { name: "Error", code: "", message: "SafeJS execution failed" };
-  const field = (name) => {
-    const descriptor = Object.getOwnPropertyDescriptor(error, name);
-    return descriptor && "value" in descriptor && typeof descriptor.value === "string" ? descriptor.value : "";
-  };
-  return { name: field("name"), code: field("code"), message: field("message") || "SafeJS execution failed" };
-}
-function statusField(error, name) {
-  if (typeof error !== "object" || error === null) return "";
-  const descriptor = Object.getOwnPropertyDescriptor(error, name);
-  return descriptor && "value" in descriptor && typeof descriptor.value === "string" ? descriptor.value : "";
-}
-function validateRuntime(runtime) {
-  if (runtime === void 0) return;
-  if (runtime.parseSourceModule !== void 0 && typeof runtime.parseSourceModule !== "function") throw new TypeError("SafeJS runtime.parseSourceModule must be a function");
-  for (const key of ["run", "createBudget", "makeFsModule", "declareHostOperation"]) {
-    if (typeof runtime[key] !== "function") throw new TypeError(`SafeJS runtime.${key} must be injected`);
-  }
-}
-function createSafeJsCommands(options, dialect) {
-  const limits = commandLimits(options.limits);
-  const runtime = options.runtime;
-  validateRuntime(runtime);
-  return [{ name: dialect.name, description: dialect.description, async execute(context) {
-    const deadline = Date.now() + limits.timeoutMs;
-    const schedule = (callback, end) => {
-      let timer;
-      const tick = () => {
-        const remaining = end - Date.now();
-        if (remaining <= 0) callback();
-        else timer = setTimeout(tick, Math.min(2147483647, remaining));
-      };
-      if (Number.isFinite(end)) tick();
-      return () => {
-        if (timer !== void 0) clearTimeout(timer);
-      };
-    };
-    const diagnose = async (message) => {
-      const diagnostic = new AbortController();
-      const end = Math.max(Date.now() + 1, deadline);
-      const pending = (0, escaping_exports.writeDiagnostic)(context.stderr, `${dialect.name}: ${message}
-`, AbortSignal.any([context.signal, diagnostic.signal]));
-      const cancel = schedule(() => diagnostic.abort(), end);
-      try {
-        await pending;
-      } catch (error) {
-        context.signal.throwIfAborted();
-        if (!diagnostic.signal.aborted) throw error;
-      } finally {
-        cancel();
-      }
-    };
-    let parsed;
-    try {
-      parsed = dialect.invocation(context.args);
-    } catch (error) {
-      await diagnose((0, diagnostics_exports.publicDiagnosticMessage)(error, context.onInternalError));
-      return { exitCode: 2 };
-    }
-    context.signal.throwIfAborted();
-    if (parsed.output !== void 0) {
-      if (import_buffer.Buffer.byteLength(parsed.output) > limits.maxOutputBytes) {
-        await diagnose("SafeJS command limit exceeded: maxOutputBytes");
-        return { exitCode: 124 };
-      }
-      await (0, contracts_exports.writeBytes)(context.stdout, import_buffer.Buffer.from(parsed.output), context.signal);
-      return { exitCode: 0 };
-    }
-    if (parsed.help) {
-      await (0, contracts_exports.writeBytes)(context.stdout, import_buffer.Buffer.from(dialect.help), context.signal);
-      return { exitCode: 0 };
-    }
-    if (!runtime) {
-      await diagnose("runtime not installed; inject run, createBudget, makeFsModule and declareHostOperation");
-      return { exitCode: 127 };
-    }
-    const controller = new AbortController();
-    const signal = AbortSignal.any([context.signal, controller.signal]);
-    let failure;
-    let hasFailure = false;
-    const fail = (error) => {
-      if (!hasFailure && !controller.signal.aborted) {
-        hasFailure = true;
-        failure = error;
-        queueMicrotask(() => controller.abort(error));
-      }
-    };
-    const cancelTimeout = schedule(() => fail(new SafeJsCommandLimitError("timeoutMs")), deadline);
-    let input;
-    const output = new GuestOutput(context.stdout, context.stderr, limits.maxOutputBytes, signal, fail);
-    let exitCode = 0;
-    let thrown;
-    let failed = false;
-    try {
-      const fromStdin = parsed.source === void 0 && parsed.file === "-";
-      let source = parsed.source;
-      let filename = parsed.file;
-      if (source === void 0) {
-        if (!fromStdin) filename = (0, path_exports.pathOf)(context, parsed.file);
-        const capabilities = fromStdin ? void 0 : await withSignal(signal, async () => await context.fs.capabilitiesFor?.(filename, { signal }) ?? context.fs.capabilities);
-        const bytes = fromStdin ? context.stdin : context.fs.readStream && capabilities?.streamingRead !== false ? context.fs.readStream(filename, { signal, chunkSize: 65536 }) : (0, contracts_exports.toByteSource)(await withSignal(signal, () => context.fs.readFile(filename, { signal, ...Number.isFinite(limits.maxSourceBytes) ? { maxBytes: limits.maxSourceBytes } : {} })));
-        const reader = new GuestInput(bytes, limits.maxSourceBytes, signal, fail, "maxSourceBytes");
-        try {
-          source = await reader.readText();
-        } finally {
-          await reader.close();
-        }
-      } else if (import_buffer.Buffer.byteLength(source) > limits.maxSourceBytes) throw new SafeJsCommandLimitError("maxSourceBytes");
-      const sourceBytes = import_buffer.Buffer.byteLength(source);
-      if (source.startsWith("\uFEFF")) source = source.slice(1);
-      source = dialect.transformSource?.(source, { ...parsed, file: filename }) ?? source;
-      if (parsed.check) {
-        const parse = runtime.parseSourceModule;
-        if (!parse) throw new UsageError("syntax checking requires an injected runtime.parseSourceModule");
-        try {
-          await withSignal(signal, async () => {
-            await parse(source, filename);
-          });
-        } catch (error) {
-          if (error instanceof SafeJsCommandLimitError || statusField(error, "code") === "budgetExceeded" || signal.aborted) throw error;
-          throw new GuestDiagnostic(errorInfo(error));
-        }
-        signal.throwIfAborted();
-        if (Date.now() >= deadline) throw new SafeJsCommandLimitError("timeoutMs");
-      } else {
-        input = new GuestInput(fromStdin ? (0, contracts_exports.toByteSource)("") : context.stdin, limits.maxInputBytes, signal, fail);
-        const guestInput = input;
-        const declare = runtime.declareHostOperation;
-        const stdio = {
-          readBytes: declare(async (size) => guestInput.readBytes(size), "read-side-effect"),
-          readText: declare(async () => guestInput.readText(), "read-side-effect"),
-          write: declare(async (text) => output.text(text), "read-side-effect"),
-          writeBytes: declare(async (bytes) => output.bytes(bytes), "read-side-effect"),
-          error: declare(async (text) => output.text(text, true), "read-side-effect"),
-          errorBytes: declare(async (bytes) => output.bytes(bytes, true), "read-side-effect")
-        };
-        const env = /* @__PURE__ */ Object.create(null);
-        for (const [key, value] of Object.entries(context.env)) env[key] = value;
-        const command = {
-          args: [...parsed.args],
-          cwd: context.cwd,
-          env,
-          setExitCode: declare((value) => {
-            signal.throwIfAborted();
-            if (typeof value !== "number" || !Number.isInteger(value) || value < 0 || value > 255) throw new TypeError("exit code must be an integer from 0 through 255");
-            exitCode = value;
-          }, "read-side-effect")
-        };
-        const budgetOptions = {};
-        for (const name of ["maxSteps", "maxCallDepth", "stringLength", "arrayLength", "dataSize"]) {
-          if (Number.isFinite(limits[name])) budgetOptions[name] = limits[name];
-        }
-        if (Number.isFinite(deadline)) budgetOptions.deadline = deadline;
-        const budget = runtime.createBudget(budgetOptions);
-        const modules = { fs: makeSafeJsFsModule(runtime.makeFsModule, context.fs, { cwd: context.cwd, signal }), stdio, command };
-        const prepared = await dialect.prepare?.(source, { ...parsed, file: filename }, modules, {
-          signal,
-          fail,
-          sourceBytes,
-          async readSource(path, maxBytes = limits.maxSourceBytes) {
-            const capabilities = await withSignal(signal, async () => await context.fs.capabilitiesFor?.(path, { signal }) ?? context.fs.capabilities);
-            const reader = new GuestInput(
-              context.fs.readStream && capabilities?.streamingRead !== false ? context.fs.readStream(path, { signal, chunkSize: 65536 }) : (0, contracts_exports.toByteSource)(await withSignal(signal, () => context.fs.readFile(path, { signal, ...Number.isFinite(maxBytes) ? { maxBytes } : {} }))),
-              maxBytes,
-              signal,
-              fail,
-              "maxSourceBytes"
-            );
-            try {
-              return await reader.readText();
-            } finally {
-              await reader.close();
-            }
-          }
-        });
-        const result = record(await withSignal(signal, () => runtime.run(prepared?.source ?? source, {
-          ...parsed.nodeOptions?.length ? { nodeOptions: parsed.nodeOptions } : {},
-          budget,
-          filename,
-          modules,
-          signal,
-          ...prepared ? {
-            bindings: prepared.bindings,
-            ...prepared.sourceLocation ? { sourceLocation: prepared.sourceLocation } : {},
-            ...prepared.importSpecifiers ? { importSpecifiers: prepared.importSpecifiers } : {}
-          } : {},
-          sink: { log: (...args) => output.console(args, false), error: (...args) => output.console(args, true) }
-        })), "SafeJS run result");
-        signal.throwIfAborted();
-        if (result.ok !== true && result.ok !== false) throw new TypeError("Invalid SafeJS run result.ok");
-        if (!result.ok) {
-          const info = errorInfo(result.error);
-          throw new GuestDiagnostic(info);
-        }
-        if (parsed.print && result.returnValue !== void 0) await output.result(result.returnValue);
-        await output.drain();
-      }
-    } catch (error) {
-      thrown = hasFailure ? failure : error;
-      failed = true;
-    } finally {
-      try {
-        await output.drain();
-      } catch (error) {
-        thrown = hasFailure ? failure : error;
-        failed = true;
-      }
-      controller.abort();
-      cancelTimeout();
-      await input?.close().catch(() => {
-      });
-    }
-    context.signal.throwIfAborted();
-    if (failed) {
-      const info = thrown instanceof GuestDiagnostic ? thrown.info : { name: statusField(thrown, "name"), code: statusField(thrown, "code") };
-      const detail = thrown instanceof SafeJsCommandLimitError ? thrown.message : (0, diagnostics_exports.publicDiagnosticMessage)(thrown, context.onInternalError);
-      if (!output.stderrFailed) await diagnose(detail);
-      return { exitCode: thrown instanceof SafeJsCommandLimitError || info.code === "budgetExceeded" ? 124 : thrown instanceof UsageError || !parsed.check && info.name === "ParseError" ? 2 : 1 };
-    }
-    return { exitCode };
-  } }];
-}
-
-// packages/safe-bash/src/commands/node/environment.ts
-init_platform();
-async function nodeEnvironment(files, inherited, cwd, read, signal, remainingBytes) {
-  const values = /* @__PURE__ */ Object.create(null);
-  for (const file of files) {
-    let source;
-    try {
-      source = await read(resolvePath(cwd, file.path), remainingBytes);
-    } catch (error) {
-      signal.throwIfAborted();
-      if (file.optional && typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") continue;
-      throw error;
-    }
-    remainingBytes -= import_buffer.Buffer.byteLength(source);
-    if (remainingBytes < 0) throw new SafeJsCommandLimitError("maxSourceBytes");
-    let index = 0;
-    const nextLine = () => {
-      while (index < source.length && source[index] !== "\n") index++;
-      index++;
-    };
-    while (index < source.length) {
-      while (" 	\r\n".includes(source[index] ?? "\0")) index++;
-      if (source[index] === "#") {
-        nextLine();
-        continue;
-      }
-      if (source.startsWith("export ", index)) index += 7;
-      const start = index;
-      while (index < source.length && "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_".includes(source[index])) index++;
-      const name = source.slice(start, index);
-      while (source[index] === " " || source[index] === "	") index++;
-      if (!name || "0123456789".includes(name[0]) || source[index] !== "=") {
-        nextLine();
-        continue;
-      }
-      index++;
-      while (source[index] === " " || source[index] === "	") index++;
-      const quote = source[index];
-      let value = "";
-      if (quote === '"' || quote === "'" || quote === "`") {
-        index++;
-        while (index < source.length && source[index] !== quote) {
-          if (quote === '"' && source[index] === "\\" && source[index + 1] === "n") {
-            value += "\n";
-            index += 2;
-          } else value += source[index++];
-        }
-        index++;
-      } else {
-        while (index < source.length && source[index] !== "\n" && source[index] !== "#") value += source[index++];
-        value = value.trim();
-      }
-      values[name] = value;
-      nextLine();
-    }
-  }
-  return Object.assign(values, inherited);
-}
-
-// packages/safe-bash/src/commands/node/safejs.ts
-function createSafeJsNodeCommands(options) {
-  const settings = record(options, "node options");
-  onlyKeys(settings, ["runtime", "limits", "replace"]);
-  if (Object.hasOwn(settings, "replace") && typeof settings.replace !== "boolean") throw new TypeError("node replace must be boolean");
-  delete settings.replace;
-  return Object.freeze([createSafeJsNodeCommand(settings)]);
-}
-function safeJsNodeCommands(options) {
-  const definitions = createSafeJsNodeCommands(options);
-  const replace = options.replace ?? false;
-  return { name: "node-commands", setup(host) {
-    if (!replace && host.commands.has("node")) throw new Error("Command already registered: node");
-    for (const definition of definitions) host.commands.register(definition, { replace });
-  } };
-}
-function invocation(args, metadata) {
-  let source;
-  let print = false;
-  let check = false;
-  let sourceMaps = false;
-  const preloads = [];
-  const nodeOptions = [];
-  const envFiles = [];
-  let inputType;
-  let index = 0;
-  for (; index < args.length; index++) {
-    const argument = args[index];
-    if (argument === "--") {
-      index++;
-      break;
-    }
-    if (argument === "-h" || argument === "--help") return { file: "-", args: [], print: false, help: true };
-    if (argument === "-v" || argument === "--version") {
-      if (!metadata?.version) throw new UsageError("inject runtime.node.version to report the actual runtime identity");
-      return { file: "-", args: [], print: false, help: false, output: metadata.version + "\n" };
-    }
-    if (argument === "--completion-bash") {
-      const flags = ["--help", "--version", "--completion-bash", "--check", "--eval", "--print", "--input-type", "--require", "--enable-source-maps", "--env-file", "--env-file-if-exists", ...Object.keys(metadata?.options ?? {})];
-      return { file: "-", args: [], print: false, help: false, output: `_node_complete() {
-  local cur_word="\${COMP_WORDS[COMP_CWORD]}"
-  COMPREPLY=( $(compgen -W '${flags.join(" ")}' -- "$cur_word") )
-}
-complete -F _node_complete node
-` };
-    }
-    const equal = argument.indexOf("=");
-    const flag = equal < 0 ? argument : argument.slice(0, equal);
-    if (flag === "--env-file" || flag === "--env-file-if-exists") {
-      const path = equal < 0 ? args[++index] : argument.slice(equal + 1);
-      if (!path) throw new UsageError(`${flag} requires a file operand`);
-      envFiles.push({ path, optional: flag === "--env-file-if-exists" });
-      continue;
-    }
-    if (Object.hasOwn(metadata?.options ?? {}, flag)) {
-      const kind = metadata.options[flag];
-      if (kind === "boolean") {
-        if (equal >= 0) throw new UsageError(`${flag} does not accept a value`);
-        nodeOptions.push(flag);
-      } else {
-        const value = equal < 0 ? args[++index] : argument.slice(equal + 1);
-        if (!value || value.startsWith("--")) throw new UsageError(`${flag} requires a value`);
-        nodeOptions.push(flag + "=" + value);
-      }
-      continue;
-    }
-    if (argument === "--enable-source-maps") {
-      sourceMaps = true;
-      continue;
-    }
-    if (argument === "--require" || argument.startsWith("--require=") || argument.startsWith("-r")) {
-      const name = argument === "--require" || argument === "-r" ? args[++index] : argument.startsWith("--require=") ? argument.slice(10) : argument.slice(2);
-      if (!name) throw new UsageError(`${argument} requires a module operand`);
-      preloads.push(name);
-      continue;
-    }
-    if (argument === "--input-type" || argument.startsWith("--input-type=")) {
-      const value = argument === "--input-type" ? args[++index] : argument.slice(13);
-      if (value !== "module" && value !== "commonjs") throw new UsageError("SafeJS node supports --input-type=module or --input-type=commonjs");
-      inputType = value;
-      continue;
-    }
-    if (argument === "--check" || argument === "-c") {
-      if (source !== void 0) throw new UsageError("conflicting source selectors");
-      check = true;
-      continue;
-    }
-    const mode = argument === "--eval" || argument.startsWith("--eval=") || argument.startsWith("-e") ? "eval" : argument === "--print" || argument.startsWith("--print=") || argument.startsWith("-p") ? "print" : void 0;
-    if (mode) {
-      if (source !== void 0 || check) throw new UsageError("conflicting source selectors");
-      print = mode === "print";
-      const equal2 = argument.indexOf("=");
-      source = argument.startsWith("--") ? equal2 >= 0 ? argument.slice(equal2 + 1) : args[++index] : argument.length > 2 ? argument.slice(2) : args[++index];
-      if (source === void 0) throw new UsageError(`${argument} requires JavaScript source`);
-      continue;
-    }
-    if (argument !== "-" && argument.startsWith("-")) throw new UsageError(`unsupported node option '${argument}'`);
-    break;
-  }
-  if (source !== void 0) return { source, file: print ? "<node -p>" : "<node -e>", args: args.slice(index), print, help: false, preloads, sourceMaps, nodeOptions, envFiles, ...inputType ? { inputType } : {} };
-  if (inputType === "commonjs" && args[index] !== void 0 && args[index] !== "-") throw new UsageError("--input-type can only be used with eval, print or stdin source");
-  return { file: args[index] ?? "-", args: args.slice(index + 1), print: false, help: false, check, preloads, sourceMaps, nodeOptions, envFiles, ...inputType ? { inputType } : {} };
-}
-function createSafeJsNodeCommand(options) {
-  const settings = record(options, "node options");
-  onlyKeys(settings, ["runtime", "limits"]);
-  if (settings.runtime === void 0 || settings.runtime === null) throw new TypeError("node requires an injected SafeJS runtime");
-  options = settings;
-  const limits = commandLimits(options.limits);
-  const suppliedMetadata = options.runtime.node;
-  const metadata = suppliedMetadata ? { ...suppliedMetadata.version !== void 0 ? { version: suppliedMetadata.version } : {}, options: Object.freeze({ ...suppliedMetadata.options }) } : void 0;
-  if (metadata?.version !== void 0 && (typeof metadata.version !== "string" || !metadata.version || metadata.version.includes("\n") || metadata.version.includes("\0"))) throw new TypeError("Invalid runtime.node.version");
-  for (const [flag, kind] of Object.entries(metadata?.options ?? {})) {
-    if (!flag.startsWith("--") || flag.length < 3 || ![...flag.slice(2)].every((char) => "abcdefghijklmnopqrstuvwxyz0123456789-".includes(char)) || kind !== "boolean" && kind !== "value") throw new TypeError("Invalid runtime.node.options");
-  }
-  const definitions = createSafeJsCommands(options, {
-    name: "node",
-    description: "Execute JavaScript with an injected SafeJS runtime and virtual I/O",
-    help: 'Usage: node [--check | -e SOURCE | -p EXPRESSION] [FILE | -] [ARG...]\nExecutes with the injected SafeJS interpreter; no native Node.js process.\nSupports --check/-c (inject parseSourceModule), --eval, --print, and --enable-source-maps.\nUse --input-type=module or --input-type=commonjs and -- before operands.\nNo source operand reads stdin. Files and inline source leave stdin for guest data.\nUse async imports from fs or require("node:fs/promises").\nUse fs.readFileSync(path, encoding) for synchronous guest text reads.\nImport or require path or node:path for virtual POSIX path helpers.\nUse --require/-r to preload virtual .cjs, .js or .json modules.\nRequire explicit virtual module paths; native modules and package search are not supported.\n',
-    invocation: (args) => invocation(args, metadata),
-    transformSource(source, selected) {
-      if (selected.inputType !== "commonjs") return source;
-      if (source.startsWith("#!")) {
-        const newline = source.indexOf("\n");
-        source = newline < 0 ? "" : source.slice(newline);
-      }
-      const filename = selected.source === void 0 ? "[stdin]" : "[eval]";
-      const body = selected.print ? `console.log((
-${source}
-));` : source;
-      return `
-const __safeBashCommonJs = { exports: {} };
-(function(exports, require, module, __filename, __dirname) {
-${selected.check ? body : `eval(${JSON.stringify(body)});`}
-}).call(globalThis, __safeBashCommonJs.exports, require, __safeBashCommonJs, ${JSON.stringify(filename)}, ".");
-`;
-    },
-    async prepare(source, selected, modules, lifecycle) {
-      const command = modules.command;
-      let remainingSourceBytes = limits.maxSourceBytes - lifecycle.sourceBytes;
-      const env = await nodeEnvironment(selected.envFiles ?? [], command.env, command.cwd, async (path2, maxBytes) => {
-        const value = await lifecycle.readSource(path2, maxBytes);
-        remainingSourceBytes -= import_buffer.Buffer.byteLength(value);
-        return value;
-      }, lifecycle.signal, remainingSourceBytes);
-      const directory = selected.inputType === "module" || selected.source === void 0 && selected.file.endsWith(".mjs") ? void 0 : selected.source !== void 0 || selected.file === "-" ? "." : dirname(selected.file);
-      const stdio = modules.stdio;
-      const fs = modules.fs;
-      const pending = /* @__PURE__ */ new Set();
-      const processModule = {
-        argv: ["/virtual/bin/node", ...selected.source === void 0 ? [selected.file] : [], ...selected.args],
-        env,
-        cwd: options.runtime.declareHostOperation(() => command.cwd, "read-side-effect"),
-        exitCode: 0,
-        stdin: { readText: stdio.readText, readBytes: stdio.readBytes },
-        stdout: { write: stdio.write },
-        stderr: { write: stdio.error }
-      };
-      const nodeFs = {
-        ...fs,
-        promises: fs,
-        ...typeof fs.readFile === "function" ? {
-          readFile: nodeReadFile(options, fs, lifecycle.signal, lifecycle.fail, pending),
-          readFileSync: options.runtime.declareHostOperation(
-            // Give the synchronous facade its own declaration so readFile stays asynchronous.
-            fs.readFile.bind(void 0),
-            "read-side-effect",
-            { awaitResult: true }
-          )
-        } : {}
-      };
-      modules.fs = { ...nodeFs, default: nodeFs };
-      const path = createNodePathModule(options.runtime, command.cwd);
-      const requiredModules = /* @__PURE__ */ new Map([["fs", nodeFs], ["node:fs", nodeFs], ["fs/promises", fs], ["node:fs/promises", fs], ["path", path], ["node:path", path]]);
-      for (const [name, module] of requiredModules) modules[name] = { ...module, default: module };
-      const prefix = bufferSource + timerSource + (directory === void 0 ? "" : "let __dirname = __safeBashDirectory;\n") + nodeRequireSource;
-      const printing = selected.print && selected.inputType !== "commonjs";
-      const sourceLocation = selected.sourceMaps ? await nodeSourceLocation(
-        source,
-        selected.file,
-        command.cwd,
-        prefix + (printing ? "console.log((\n" : ""),
-        lifecycle.readSource,
-        lifecycle.signal,
-        limits
-      ) : void 0;
-      return {
-        ...sourceLocation ? { sourceLocation } : {},
-        importSpecifiers: [...requiredModules.keys()],
-        source: prefix + (printing ? `console.log((
-${source}
-));` : source) + "\n;await __safeBashTimers.drain(); __safeBashSetExitCode(process.exitCode);",
-        bindings: {
-          ...directory === void 0 ? {} : { __safeBashDirectory: directory },
-          __safeBashBuffer: bufferBindings(options),
-          __safeBashTimers: timerBindings(options, lifecycle.signal, lifecycle.fail, pending),
-          process: processModule,
-          __safeBashSetExitCode: command.setExitCode,
-          __safeBashPreloads: selected.preloads ?? [],
-          __safeBashCwd: command.cwd,
-          __safeBashEntryDirectory: selected.source === void 0 && selected.file !== "-" ? dirname(selected.file) : command.cwd,
-          __safeBashModuleRead: options.runtime.declareHostOperation(async (path2) => {
-            if (typeof path2 !== "string") throw new TypeError("module path must be a string");
-            const value = await lifecycle.readSource(path2, remainingSourceBytes);
-            remainingSourceBytes -= import_buffer.Buffer.byteLength(value);
-            if (remainingSourceBytes < 0) {
-              const error = new SafeJsCommandLimitError("maxSourceBytes");
-              lifecycle.fail(error);
-              throw error;
-            }
-            return value;
-          }, "read-side-effect", { awaitResult: true }),
-          __safeBashModulePath: options.runtime.declareHostOperation((base, name) => {
-            if (typeof name !== "string" || typeof base !== "string") throw new TypeError("module name must be a string");
-            if (!(name.startsWith("./") || name.startsWith("../") || name.startsWith("/"))) return null;
-            if (name.includes("\0") || !(name.endsWith(".json") || name.endsWith(".js") || name.endsWith(".cjs"))) {
-              throw new TypeError("Unsupported node module; use an explicit .cjs, .js or .json path");
-            }
-            return resolvePath(base, name);
-          }, "read-side-effect"),
-          __safeBashRequire: options.runtime.declareHostOperation((name) => {
-            const module = typeof name === "string" ? requiredModules.get(name) : void 0;
-            if (!module) throw new TypeError("Unsupported node module; use fs, node:fs, fs/promises, node:fs/promises, path or node:path");
-            return module;
-          }, "read-side-effect")
-        }
-      };
-    }
-  });
-  return Object.freeze(definitions[0]);
-}
-
-export {
-  diagnostics_exports,
-  record,
-  onlyKeys,
-  stringValue,
-  withSignal,
-  defaultSafeJsLimits,
-  SafeJsCommandLimitError,
-  createSafeJsNodeCommands,
-  safeJsNodeCommands,
-  createSafeJsNodeCommand
-};
-//# sourceMappingURL=chunk-NB2V7EOY.js.map